Arun Donti

It gets around the issue of needing to set up a private package in the first place for just some defaults. But some of those defaults can be "complex" actions...

I know of several cases where others have successfully made their own packs and custom rules without issue. > the following if statement is never true Do you happen to...

It may be easier to do this now given that Secrets Manager has [native support ](https://aws.amazon.com/about-aws/whats-new/2024/03/aws-secrets-manager-redshift-serverless-data-warehouse/)for secret rotation with Redshift Serverless

I believe this is functioning as intended. The [AWS Config rule (https://docs.aws.amazon.com/config/latest/developerguide/elbv2-acm-certificate-required.html)that this check is derived from states > Checks if Application Load Balancers and Network Load Balancers have listeners...

Thanks for the feature request! I'm somewhat hesitant to implement this as a feature as a poorly created regex expression can lead to unintended suppressions on resources. Additionally, path based...

> I actually got hit by that issue of order mattering, but I assumed that was just the intended behaviour of the library - I think I'd suppressed a rule...

Happy to help with any PRs for this 😄

I'm worried about the `README` becoming too long and hard to read (if the examples were to be mirrored there). Some thoughts related to this. 1. The [ConstructHub](https://constructs.dev/packages/cdk-nag/v/2.20.4?lang=python) page for...

You will need to add an IP address restriction to the `accessPolicies` like in [this example](https://github.com/cdklabs/cdk-nag/blob/main/test/rules/OpenSearch.test.ts#L194-L231)

Closing due to inactivity